SecurityFocus

Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities 2010-08-10
Salvatore Fresta aka Drosophila (drosophilaxxx gmail com)

Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities

Name Amblog
Vendor http://robitbt.hu
Versions Affected 1.0

Author Salvatore Fresta aka Drosophila
Website http://www.salvatorefresta.net
Contact salvatorefresta [at] gma

[ more ] [ reply ]

Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities 2010-08-10
Salvatore Fresta aka Drosophila (drosophilaxxx gmail com)

Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities

Name Teams
Vendor http://www.joomlamo.com
Versions Affected 1_1028_100809_1711

Author Salvatore Fresta aka Drosophila
Website http://www.salvatorefresta.net
Co

[ more ] [ reply ]

ZDI-10-146: Apple Webkit Anchor Tag Mouse Click Event Dispatch Remote Code Execution Vulnerability 2010-08-09
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-146: Apple Webkit Anchor Tag Mouse Click Event Dispatch Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-10-146
August 9, 2010

-- CVE ID:
CVE-2010-0048

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Apple

-- Affected Products:
Apple Safar

[ more ] [ reply ]

ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability 2010-08-09
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-10-145
August 9, 2010

-- CVSS:
9, (AV:N/AC:L/Au:S/C:C/I:C/A:C)

-- Affected Vendors:
Novell

-- Affected Products:
Novell Zenworks

-- Vulnerab

[ more ] [ reply ]

ZDI-10-144: Apple Webkit Rendering Counter Remote Code Execution Vulnerability 2010-08-09
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-144: Apple Webkit Rendering Counter Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-10-144
August 9, 2010

-- CVE ID:
CVE-2010-1784

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Apple

-- Affected Products:
Apple WebKit

-- Vulnerability

[ more ] [ reply ]

Nagios XI 2009R1.2B Multiple CSRF 2010-08-09
Adam Baldwin (adam_baldwin ngenuity-is com)

Advisory Information

Advisory ID: NGENUITY-2010-006
Date published: Aug. 7, 2010
Class: Cross-Site Request Forgery (CSRF)

Software Description

Nagios XI is the commercial / enterprise version of the open source
Nagios project.

Vulnerability Description

Nagios XI 2009R1.2B i

[ more ] [ reply ]

ZDI-10-143: Novell Sentinel Log Manager Multiple Servlet Remote Code Execution Vulnerabilities 2010-08-09
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-143: Novell Sentinel Log Manager Multiple Servlet Remote Code Execution Vulnerabilities
http://www.zerodayinitiative.com/advisories/ZDI-10-143
August 9, 2010

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Novell

-- Affected Products:
Novell Security Manager

-- Vulnerabilit

[ more ] [ reply ]

XSS vulnerability in allinta CMS 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22529
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_allinta_cms_1.html
Product: Allinta CMS
Vendor: Allinta ( http://www.allinta.com/ )
Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerability Type:

[ more ] [ reply ]

XSS vulnerability in Eden Platform 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22539
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_eden_platform_1.htm
l
Product: Eden Platform
Vendor: Preation ( http://www.preation.com/ )
Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerability

[ more ] [ reply ]

XSS vulnerability in allinta CMS 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22531
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_allinta_cms_2.html
Product: Allinta CMS
Vendor: Allinta
Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerability Type: XSS (Cross Site Scripting)
S

[ more ] [ reply ]

SQL injection vulnerability in allinta CMS 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22530
Reference: http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_c
ms.html
Product: Allinta CMS
Vendor: Allinta ( http://www.allinta.com/ )
Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerabili

[ more ] [ reply ]

SQL injection vulnerability in allinta CMS 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22532
Reference: http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_c
ms_1.html
Product: Allinta CMS
Vendor: Allinta ( http://www.allinta.com/ )
Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerabi

[ more ] [ reply ]

XSS vulnerability in Eden Platform 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22538
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_eden_platform.html
Product: Eden Platform
Vendor: Preation ( http://www.preation.com/ )
Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerability T

[ more ] [ reply ]

XSS vulnerability in allinta CMS 2010-08-09
advisory htbridge ch

Vulnerability ID: HTB22528
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_allinta_cms.html
Product: Allinta CMS
Vendor: Allinta ( http://www.allinta.com/ )
Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions
Vendor Notification: 26 July 2010
Vulnerability Type: X

[ more ] [ reply ]

Re: Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities 2010-08-07
i abhi27 gmail com

This reported vulnerability is fixed in Pragyan CMS v3.0

[ more ] [ reply ]

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability 2010-08-09
lilf (lilf neusoft com)

QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability

By Lufeng Li of Neusoft Corporation

Vulnerable: QQpcmgr<=v4.0Beta1

Vendor: Tencent Inc

1) Software Description:
QQ doctors more than three years after the development and operation, and finally ushered in the fourth gener

[ more ] [ reply ]

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities 2010-08-06
Salvatore Fresta aka Drosophila (drosophilaxxx gmail com)

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities

Name cgTestimonial
Vendor http://www.cmsgalaxy.com
Versions Affected 2.2

Author Salvatore Fresta aka Drosophila
Website http://www.salvatorefresta.net
Contact salvatoref

[ more ] [ reply ]

[SECURITY] [DSA 2090-1] New socat packages fix arbitrary code execution 2010-08-06
Luciano Bello (luciano debian org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------

Debian Security Advisory DSA-2090-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Luciano Bello
August 06, 2010

[ more ] [ reply ]

Re: [CORE-2010-0405] Adobe Director Invalid Read 2010-08-06
Core Security Technologies Advisories (advisories coresecurity com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Core Security Technologies - CoreLabs Advisory
http://corelabs.coresecurity.com/

Adobe Director DIRAPI.DLL Invalid Read Vulnerability

Additional research on this vulnerability was performed by Core Security
Technologies researchers. U

[ more ] [ reply ]

[ MDVSA-2010:146 ] libtiff 2010-08-06
security mandriva com

ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior to 3.7 SP1 2010-08-06
security_alert emc com

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

RSA, The Security Division of EMC, informs about potential security

vulnerability in RSA enVision® versions prior 3.7 SP1

Security Advisory

Updated July 30, 2010

Summary:

RSA enVision versions prior 3.7 SP1 may contain potential denial

[ more ] [ reply ]

[ MDVSA-2010:145 ] libtiff 2010-08-06
security mandriva com

ZDI-10-139: Novell iPrint Client Browser Plugin Parameter Name Remote Code Execution 2010-08-05
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-139: Novell iPrint Client Browser Plugin Parameter Name Remote Code Execution
http://www.zerodayinitiative.com/advisories/ZDI-10-139
August 5, 2010

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Novell

-- Affected Products:
Novell iPrint

-- TippingPoint(TM) IPS Customer Pr

[ more ] [ reply ]

[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities 2010-08-06
Raphael Geissert (geissert debian org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------

Debian Security Advisory DSA-2089-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Raphael Geissert
August 6, 2010

[ more ] [ reply ]

TPTI-10-05: Novell iPrint Client Browser Plugin Remote File Deletion Vulnerability 2010-08-05
ZDI Disclosures (zdi-disclosures tippingpoint com)

TPTI-10-05: Novell iPrint Client Browser Plugin Remote File Deletion Vulnerability
http://dvlabs.tippingpoint.com/advisory/TPTI-10-05
August 4, 2010

-- CVSS:
7.8, (AV:N/AC:L/Au:N/C:N/I:N/A:C)

-- Affected Vendors:
Novell

-- Affected Products:
Novell iPrint

-- TippingPoint(TM) IPS Customer Protect

[ more ] [ reply ]

ZDI-10-142: Apple Webkit SVG First-Letter Style Remote Code Execution Vulnerability 2010-08-05
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-142: Apple Webkit SVG First-Letter Style Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-10-142
August 5, 2010

-- CVE ID:
CVE-2010-1785

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Apple

-- Affected Products:
Apple WebKit

-- TippingPo

[ more ] [ reply ]

[USN-969-1] PCSC-Lite vulnerability 2010-08-05
Kees Cook (kees ubuntu com)

===========================================================
Ubuntu Security Notice USN-969-1 August 05, 2010
pcsc-lite vulnerability
CVE-2009-4901, CVE-2009-4902, CVE-2010-0407
===========================================================

A security issue affects the following Ubuntu relea

[ more ] [ reply ]

TPTI-10-06: Novell iPrint Client Browser Plugin ExecuteRequest debug Parameter Remote Code Execution Vulnerability 2010-08-05
ZDI Disclosures (zdi-disclosures tippingpoint com)

TPTI-10-06: Novell iPrint Client Browser Plugin ExecuteRequest debug Parameter Remote Code Execution Vulnerability
http://dvlabs.tippingpoint.com/advisory/TPTI-10-06
August 4, 2010

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Novell

-- Affected Products:
Novell iPrint

-- Tippin

[ more ] [ reply ]

Vulnerabilities in Dataface Web Application Framework 2010-08-06
MustLive (mustlive websecurity com ua)

Hello Bugtraq!

I want to warn you about security vulnerabilities in Dataface Web
Application Framework.

-----------------------------
Advisory: Vulnerabilities in Dataface Web Application Framework
-----------------------------
URL: http://websecurity.com.ua/4276/
-----------------------------
Aff

[ more ] [ reply ]

ZDI-10-141: Apple Webkit SVG ForeignObject Rendering Layout Remote Code Execution Vulnerability 2010-08-05
ZDI Disclosures (zdi-disclosures tippingpoint com)

ZDI-10-141: Apple Webkit SVG ForeignObject Rendering Layout Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-10-141
August 5, 2010

-- CVE ID:
CVE-2010-1786

-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

-- Affected Vendors:
Apple

-- Affected Products:
Apple Safari

[ more ] [ reply ]